Privacy Policy

1. Introduction

At halafaisal.com, we are deeply committed to protecting the privacy, confidentiality, and security of your personal data. This Privacy Policy outlines how we collect, use, and safeguard your information in full compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws. We respect your privacy rights and are dedicated to transparency regarding our data processing practices.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all users of halafaisal.com and any related services. For the purposes of data protection legislation, hala faisal is the data controller responsible for determining the purposes and means of processing personal data collected through this website. All data processing activities are performed in accordance with the principles of lawfulness, fairness, and transparency.

If you have any questions regarding your data or this Policy, you may contact us at [email protected].

3. Categories of Data Processed

We may collect and process the following categories of personal data:

a. Usage Data
This includes data obtained from your interactions with halafaisal.com, such as your IP address, browser type and version, operating system, referral sources, page views, website navigation paths, dates and times of access, and session identifiers.

b. Account Data
When you create an account with us, we may collect your full name, billing and delivery addresses, email address, telephone number, and account credentials.

c. Profile Data
We may also process information related to your preferences, purchase history, browsing history, behavioral patterns, and interactions with our content or services.

d. Communication Data
Includes records of correspondence, customer service messages, inquiries, support tickets, and communication history related to your interactions with our team.

e. Technical Data
Collected from your device or browser, including device identifiers, system configuration details, internet service provider information, and diagnostics data used for troubleshooting and service optimization.

f. Transaction Data
In the course of processing payments and fulfilling orders, we may collect credit/debit card information (processed via secure payment gateways), transaction dates, purchased items, delivery information, and associated purchase history.

g. Preference Data
We may gather data concerning your preferences with regard to marketing communications, language selection, product interests, subscription status, and consent for promotional materials.

4. Legal Bases for Processing

We will process your personal data only when permitted by applicable legislation. Primary legal bases include:

– Performance of a Contract: When processing is necessary to fulfill contractual obligations with you.
– Legitimate Interests: Where we have a legitimate business purpose not overridden by your rights (e.g., website analytics and fraud prevention).
– Legal Obligation: When necessary to comply with statutory and regulatory requirements.
– Consent: Where you have provided explicit and informed consent—particularly for marketing activities and cookie usage.

5. Your Rights

Under GDPR, CCPA, and applicable privacy regulations, you have the following rights concerning your personal data:

– Right of Access: You may request access to your personal data and receive details on how it is processed.
– Right to Rectification: You can request correction of inaccurate or incomplete information.
– Right to Erasure: You may ask for your personal data to be deleted under certain legal grounds.
– Right to Restriction: You can request the limitation of processing in specific circumstances.
– Right to Data Portability: You may request that your data be transferred to you or another controller in a structured, commonly used format.
– Right to Object: You can object to data processing based on our legitimate interests or for direct marketing purposes.
– Right to Withdraw Consent: You can withdraw consent at any time, where processing is based on consent.

To exercise your rights, please contact us at [email protected].

6. Security Measures

We implement robust organizational, technical, and administrative protections to ensure data security:

– Encryption of data in transit and at rest using industry standards
– Role-based access controls and authentication safeguards
– Regular security auditing and vulnerability assessments
– Secure data backups and disaster recovery protocols
– Staff training on data protection and privacy best practices

While we strive to use commercially acceptable means to protect your personal data, no method of electronic storage or transmission is 100% secure.

7. International Transfers

When personal data is transferred from the European Economic Area (EEA) or other jurisdictions, we do so under appropriate safeguards, such as:

– Standard Contractual Clauses (SCCs) approved by the European Commission
– Binding Corporate Rules (BCRs) where applicable
– Adequacy decisions made by relevant authorities confirming an adequate level of protection

All such transfers are made in compliance with applicable privacy legislation, and we ensure protection consistent with this Privacy Policy.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or to satisfy legal, regulatory, accounting, or reporting obligations. Category-specific retention periods include:

– Usage Data: Retained for up to 12 months for analytical purposes
– Account Data: Retained for the duration of your account and six years thereafter
– Profile Data: Retained for three years from the last activity
– Communication Data: Retained for two years to support customer service functions
– Technical Data: Retained for up to 18 months for diagnostics
– Transaction Data: Retained for seven years for tax and audit compliance
– Preference Data: Retained until consent is withdrawn or as required for marketing analysis

Upon expiration of applicable retention periods, data is deleted or anonymized securely.

9. Cookie Policy

Our website uses cookies and similar technologies to enhance user experience, provide functionality, and analyze website traffic. Cookies fall into the following categories:

– Essential Cookies: Required for proper functioning of halafaisal.com (e.g., login authentication, shopping cart)
– Functional Cookies: Remember user settings and preferences (e.g., language selection)
– Performance and Analytics Cookies: Collect data on how visitors use the site for performance optimization
– Marketing Cookies: Track user interaction and promote relevant advertisements across platforms

10. Cookie Management and Compliance

In compliance with GDPR and CCPA, we employ a cookie consent mechanism that allows users to opt-in or opt-out of non-essential cookies. When you first visit halafaisal.com, you are prompted to review your cookie settings. You can update your preferences at any time via our Cookie Settings tool or through your browser’s cookie management features.

You also have the right to opt out of the sale of personal data under the CCPA, which can be effected through our Do Not Sell My Personal Information page or by contacting us directly.

11. Children’s Privacy

halafaisal.com does not knowingly collect or process personal data from children under the age of 13. If we become aware that we have inadvertently collected such data, we will delete it immediately. If you believe we have unknowingly collected personal data of a minor, please contact us at [email protected].

12. Policy Updates and User Notification

We reserve the right to amend this Privacy Policy as necessary to reflect changes to our services, legal obligations, or regulatory guidance. Users will be notified of significant material changes to the Policy via halafaisal.com or through direct communication. Continued use of the website following such updates signifies your acceptance of the revised policy.

13. Contact

For any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

Email: [email protected]
Website: https://halafaisal.com

We are committed to upholding your privacy rights and ensuring your data is treated responsibly and in compliance with all applicable laws.